[病毒样本] 2

显示全部楼层 · 发表于 2008-6-30 08:16:27

2.exe
2008-6-30 8:16:35 Real-time file system protection file C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\removalfile.bat Win32/Adware.Virtumonde application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: G:\v\2.exe.

显示全部楼层 · 发表于 2008-6-30 08:17:23

2008-6-30 8:17:31 Kernel File 'G:\v\1.exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-6-30 08:26:07

F:\2.rar>>2.exe Trojan.Cap86300.easc 木马

显示全部楼层 · 发表于 2008-6-30 08:35:53

1个···

显示全部楼层 · 发表于 2008-6-30 08:48:24

Sent to Avira
25061638 2.exe 33 KB UNDER ANALYSIS
25061639 1.exe 44.5 KB UNDER ANALYSIS

显示全部楼层 · 发表于 2008-6-30 09:16:37

金山 0

显示全部楼层 · 发表于 2008-6-30 09:21:31

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\KB908531\10\1.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\GOS23.TMP
2) C:\WINDOWS\SYSTEM32\WINRVC32.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\KB908531\10\2.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\IIFCBUVW.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-6-30 09:23:20

KV2008 28号病毒库 PASS 0

显示全部楼层 · 发表于 2008-6-30 09:49:50

File:  2.rar
Status:  INFECTED/MALWARE
MD5:  7f7e26b2f594cd754f6233c2e9ab5323
Packers detected:  -
Scanner results
Scan taken on 30 Jun 2008 01:46:42 (GMT)
A-Squared  Found nothing
AntiVir  Found nothing
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found Dropped:Trojan.Mezzia.DP
ClamAV  Found nothing
CPsecure  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Ikarus  Found BehavesLike.Trojan.WinlogonHook
Kaspersky Anti-Virus  Found nothing
NOD32  Found nothing
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Sophos Antivirus  Found Troj/Addler-Fam
VirusBuster  Found nothing
VBA32  Found nothing

[病毒样本] 2

本帖子中包含更多资源

本帖子中包含更多资源